dnssec-revoke(8) on Linux
The text e2efe3f64d2a, as Debian 6.0 (Squeeze) shipped it.
Set the REVOKED bit on a DNSSEC key
Flags it lists
-
-E -
-K -
-f -
-h -
-r -
-v